store.fcbarcelona.com

- Barça Licensing and Merchandising S.L. -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0d:43:b1:e4:5d:ff:8e:a4:5a:12:16:cf:fc:37:9d:0c was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barça Licensing and Merchandising S.L.

Company registration number: B67192955
Organization: Barça Licensing and Merchandising S.L.
State / Province: Barcelona
Locality: Barcelona
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:43:b1:e4:5d:ff:8e:a4:5a:12:16:cf:fc:37:9d:0c
Serial Number (int): 17631455914337695001978737533681900812
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:e8:a6:0e:dc:a3:26:9e:2f:43:9d:02:93:3a:e8:11:d4:6a:86:05
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 31:7b:4c:1d:41:07:9d:cf:49:87:3f:d2:8e:94:94:0f:36:bb:02:ee
Fingerprint (sha256): 23:f5:b1:b7:cb:dd:98:d0:35:bc:7c:07:9a:6b:70:8f:b8:2c:d2:c8:54:b9:d9:8b:21:e4:45:0e:fa:c6:3d:4a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate store.fcbarcelona.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for store.fcbarcelona.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

store.fcbarcelona.com
ecommerce.fcbarcelona.net
api-ecommerce.fcbarcelona.com

Other certificates including the domain name fcbarcelona.com

(limited to 100 certificates)
confederaciopenyesfcbarcelona.cat
confederaciopenyesfcbarcelona.cat
brandcenter.fcbarcelona.com
confederaciopenyesfcbarcelona.cat
gestorweb.fcbarcelona.net
tickets-fcb.fcbarcelona.com
pre-forms.fcbarcelona.com
forms.fcbarcelona.com
games.fcbarcelona.com
especiales.canal5.televisa.com
fcbescola.fcbarcelona.com
arxiu.fcbarcelona.cat
games.fcbarcelona.com
seientlliure.fcbarcelona.cat
beta.fcbarcelona.com
adtarget.fcbarcelona.com
culers.fcbarcelona.com
forms.fcbarcelona.com
frmforms.fcbarcelona.com
www.fcbarcelona.cat
barcanovesregles.fcbarcelona.cat
clorian.com
pre-countdowns.fcbarcelona.com
penyes.fcbarcelona.com
*.accounts.fcbarcelona.com
*.fcbarcelona.com
pre-games.fcbarcelona.com
akamai-san33.exacttarget.com
xptemplates.flowics.com
store.fcbarcelona.com
usuaris.fcbarcelona.cat
buy-tickets.fcbarcelona.com
pre-ottbills.fcbarcelona.com
www.fcbarcelona.cat
akamai-san33.exacttarget.com
fcbarcelona.cat
xptemplates.flowics.com
beta.fcbarcelona.com
store.fcbarcelona.com
fcbarcelona.co.id
xptemplates.flowics.com
xptemplates.flowics.com
xptemplates.flowics.com
api.fcbarcelona.com
xptemplates.flowics.com
games.fcbarcelona.com
photoawards.fcbarcelona.com
games.fcbarcelona.com
xptemplates.flowics.com
*.accounts.fcbarcelona.com
fcb-escola.fcbarcelona.com
seientlliure.fcbarcelona.cat
shop.fcbarcelona.com
m.store.fcbarcelona.com
www.fcbarcelona.cat
players.fcbarcelona.com
xptemplates.flowics.com
promo.fcbarcelona.com
suport.fcbarcelona.com
store.fcbarcelona.com
players.fcbarcelona.com
fundacio.fcbarcelona.cat
fcbescola.fcbarcelona.com
play-and-win.fcbarcelona.com
tickets.fcbarcelona.com
fcbescola.fcbarcelona.com
tickets.fcbarcelona.com
fcbescola.fcbarcelona.com
*.fcbarcelona.com
games.fcbarcelona.com
fcbescola.fcbarcelona.com
*.fcbarcelona.com
xptemplates.flowics.com
games.fcbarcelona.com
fcbarcelona.cat
*.fcbarcelona.com
k8s-dig.fcbarcelona.com
pages.email.fcbarcelona.com
rakutenadvent.fcbarcelona.com
xptemplates.flowics.com
akamai-san33.exacttarget.com
store.fcbarcelona.com
shop.fcbarcelona.com
clorian.com
arxiu.fcbarcelona.cat
fcbarcelona.com
games.fcbarcelona.com
tls.automattic.com
forms.fcbarcelona.com
www.fcbarcelona.cat
fundacio.fcbarcelona.cat
appmedia.fcbarcelona.com
tickets-fcb.fcbarcelona.com
brandcenter.fcbarcelona.com
www.fcbarcelona.cat
games.fcbarcelona.com
xptemplates.flowics.com
strack.shop.fcbarcelona.com
*.fcbarcelona.com
intelligencecenter.fcbarcelona.com

Certificate

The complete raw certificate details for store.fcbarcelona.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6YKa8aIYUEtHMZqhmoq
VKFJBH1yaCrKUcY+QxHW8dHXuX2fr5EnA9USbRGA6toC0kAtv+TUIcZWOlbRBMGR
8Fg/XcmzZjzDK4qD9GxZ06PY2zCsI69kwNpb7NBKava4BsZsrlQ+cYxsvIyfm/+m
ZdzcOu+045ZAY7hCECdj6nECKsdd24gsB48KNy0LjFZCkCKkpGHmqgjWa8fCTB6Y
kIx8z2Enrw0rHBgMC2T3W1oZ2S7FRBpSZl9o2WtjL2wUsRR1n7N5bOTgt7gLJBK3
bTAW3uks8RAWAGDj8arRe2eWkdOoWRR1DizJliiZAXanvlew1oEDUV1D3nv7PniJ
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17631455914337695001978737533681900812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'B67192955'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barcelona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Barça Licensing and Merchandising S.L.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'store.fcbarcelona.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23183487533046788149360160585024390298971955400621404970322756954946574763783149856972682841839171124619163533259466397617960861146579624246359539314104985273892335170344409719535296290788887244531312411466697851964565209695001342602056695778000883670154127092856373257221062995769313473692752263819500716104412951490343196852208595898364278485603465470165000471863269741798007322511030474857727915254032302545432567657742763326958594852171397580008877496926944550406533111779834788591360897754385809341503332855458109468916794101138247869416235771122326691893850031172324047345348204299055079897531820011145047607579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14e8a60edca3269e2f439d02933ae811d46a8605
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.fcbarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecommerce.fcbarcelona.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-ecommerce.fcbarcelona.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000017158bfdd970000040300473045022100f0c481175b9a4475379ea467a3d43256f2d9aae82e5d142374564bff160accc90220019a84cfe961a4169f81ef4c75fa6bddd3a9621e484eff5d89d32d773bff0e4c0075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000017158bfdd9b0000040300463044022078371a74fd9379cfbb7d48c94ded47f0a18f9e9c58e3e3a11ba0650bc02975ee022068e54c3341126a98af090e9e556a6b747448c191b30461a307af93fa5f3cb397
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0088efd31df4f01b97e44188f763dca3b7e66afa8462d35dc774307ecba42d4e8a00849100719afc5080d948ffee10581b1e983ffdb4869238eb8ea78ee87b1e0887f17004fe245d9cfbf65c5cc86aef51c61bf3003fb0e81a006e9bb2d669230a895f6e7c1bb6479e5990bf27fdae0a473a1984a8293cdd6c2b50574b8ea2cb278ed62c683c329dc66850c1278728be50a8aba07d673f4d5cda9b75bdceb41a6487c684e68bc7ba689c34efc94c6fe743dde7b23ed0e0a64513928cd5b44f67736cfdc3be65d3341a593990643b78de27e4004b5850c4e9307eb27a62ee01044400122965d598944f45f5982481230a266d8f18cbb455aec62f1493c3f0d694a0